$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa File: 747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa (raw, json) Hash identifier: H7bXBU5E8hS3nQOXPIespITTLxWR6c4BQu2rtbb8tR0= Subject key identifier: 86:74:13:AC:63:92:5E:A2:D7:00:AD:1C:6A:09:25:A3:65:F3:76:E8 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D06E03D16DF894300C280 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:e0:3d:16:df:89:43:00:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0947ed24-1144-4d78-beeb-879566235aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:8f:49:d6:e1:11:66:df:78:dc:10:e6:b7: 43:e3:ef:31:7f:e4:b5:b4:dc:e5:7e:6a:2f:a9:97: c7:cf:73:4f:6c:34:9f:07:d8:ff:7c:f5:3b:17:b8: 5f:da:db:27:97:4c:15:d2:b2:70:58:37:c4:8a:c9: 58:78:db:58:a6:8b:7d:8e:9e:ae:1c:01:5b:1a:82: 77:2e:1a:f7:d6:50:5d:75:42:59:e3:d6:68:cf:e7: c0:2e:2c:8c:11:73:e9:b1:d8:51:48:a6:d4:94:a1: 69:03:dc:d5:8d:fe:0e:f7:b6:50:d0:5a:9f:5f:e3: cb:83:55:8a:8b:f4:dc:a3:67:93:be:c2:b8:f7:88: 88:c5:1d:23:ec:63:31:ae:1e:de:de:1d:9b:59:c7: cc:ca:55:4d:60:13:f1:96:a9:b6:82:90:de:40:ee: f0:a9:f2:57:81:cc:09:36:54:7c:59:8a:1a:ff:7c: c6:62:d5:fd:67:0a:5f:17:b5:54:5a:4b:93:3a:10: 64:24:e9:67:d3:a6:f8:e9:e3:de:8b:97:da:9f:1b: 29:4e:ff:13:7d:26:b6:7f:6c:a2:20:00:bf:21:c5: 38:c1:a2:0c:42:04:47:7d:26:34:6d:ea:a9:ef:63: 42:02:e0:f6:9d:2c:d6:1b:00:c8:50:7c:35:a5:59: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:74:13:AC:63:92:5E:A2:D7:00:AD:1C:6A:09:25:A3:65:F3:76:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5a:42:c1:ab:6f:8c:ac:ce:e4:47:5b:a3:73:30:0b:33:ce: 8f:fd:5e:ec:c9:73:47:f1:3b:be:58:86:8c:db:ba:ae:64:cf: 98:ea:67:6c:f8:32:ff:1a:25:9d:57:f6:f3:31:6a:42:cd:f3: 43:92:a3:5e:9e:5d:d1:ab:69:6f:19:d4:7a:31:42:f2:29:cd: c9:9c:aa:5c:81:fb:c5:a9:a5:3e:81:68:0d:fa:2e:15:00:6b: 8f:cc:57:6a:81:03:72:d8:83:6b:67:5b:47:04:c2:35:a1:b7: 47:e7:85:38:65:e7:f3:ac:fc:95:28:c4:eb:00:49:44:b8:1f: 90:13:bf:7b:e5:d5:6a:ca:86:bf:65:66:5a:79:33:43:73:97: 77:d8:b4:5f:08:cd:ad:cc:4a:c0:fa:03:3e:0d:98:d6:89:bf: 86:99:d1:24:3d:3f:9a:4a:42:b9:f8:d1:56:6f:92:5f:81:45: ea:b1:82:3c:e7:ec:30:7b:cc:e7:c9:4c:7b:dd:7d:05:ef:6f: a8:78:c3:06:f6:db:56:3c:bb:e7:c3:7f:0a:85:b3:9e:8f:c9: 74:bb:19:6d:30:88:73:48:26:7e:b0:97:c3:2c:c1:03:6b:6c: 36:07:ec:f2:b8:cd:b1:8a:f5:a8:f3:de:48:0b:de:dd:5d:76: 62:71:24:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQbgPRbfiUMAwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDk0N2VkMjQtMTE0NC00ZDc4LWJlZWItODc5NTY2MjM1YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcSPSdbhEWbfeNwQ5rdD4+8xf+S1tNzlfmov qZfHz3NPbDSfB9j/fPU7F7hf2tsnl0wV0rJwWDfEislYeNtYpot9jp6uHAFbGoJ3 Lhr31lBddUJZ49Zoz+fALiyMEXPpsdhRSKbUlKFpA9zVjf4O97ZQ0FqfX+PLg1WK i/Tco2eTvsK494iIxR0j7GMxrh7e3h2bWcfMylVNYBPxlqm2gpDeQO7wqfJXgcwJ NlR8WYoa/3zGYtX9ZwpfF7VUWkuTOhBkJOln06b46ePei5fanxspTv8TfSa2f2yi IAC/IcU4waIMQgRHfSY0beqp72NCAuD2nSzWGwDIUHw1pVkVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ0E6xjkl6i1wCtHGoJJaNl83boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNzQ3YTQyMWItZDdiZC0z NzhlLWFlNzYtYTFmYjBhODE5ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxaQsGrb4yszuRHW6NzMAszzo/9XuzJc0fxO75Yhozbuq5kz5jqZ2z4 Mv8aJZ1X9vMxakLN80OSo16eXdGraW8Z1HoxQvIpzcmcqlyB+8WppT6BaA36LhUA a4/MV2qBA3LYg2tnW0cEwjWht0fnhThl5/Os/JUoxOsASUS4H5ATv3vl1WrKhr9l Zlp5M0Nzl3fYtF8Iza3MSsD6Az4NmNaJv4aZ0SQ9P5pKQrn40VZvkl+BReqxgjzn 7DB7zOfJTHvdfQXvb6h4wwb221Y8u+fDfwqFs56PyXS7GW0wiHNIJn6wl8MswQNr bDYH7PK4zbGK9ajz3kgL3t1ddmJxJK0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:11 2025 by rpki-client